Efficient Polar Coding of Quantum Information 
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Polar coding, introduced 2008 by Ankan, is tiie first (very) efficiently encodable and decodable 
coding scheme whose information transmission rate provably achieves the Shannon bound for clas- 
sical discrete memory less channels in the asymptotic limit of large block sizes. Here we study the 
use of polar codes for the transmission of quantum information. Focusing on the case of qubit 
Pauli channels and qubit erasure channels, we use classical polar codes to construct a coding scheme 
which, using some pre-shared entanglement, asymptotically achieves a net transmission rate equal 
to the coherent information using efficient encoding and decoding operations and code construction. 
Furthermore, for channels with sufficiently low noise level, we demonstrate that the rate of preshared 
entanglement required is zero. 



One of the most exciting developments in classical in- 
formation theory of the last decade, polar coding is a 
channel-adapted, block coding scheme which enjoys es- 
sentially all of the features one would like such schemes 
to have [1]. Polar codes enable the transmission of in- 
formation over discrete, memoryless channels (DMCs) at 
rates up to the symmetric capacity of the channel (the 
Shannon limit assuming uniformly-distributed inputs to 
the channel) [2], and the capacity can be reached for ar- 
bitrary channel noise rates. Just as important, both the 
construction of polar codes as well as the encoding and 
decoding operations can be performed very efficiently, in 
O(nlogn) steps for n the blocklength of the code [1, 3]. 

The main idea underlying the construction of polar 
codes is channel polarization: Out of n identical DMCs 
one can create a new set of n logical channels via a suit- 
able transformation such that each logical channel is es- 
sentially either "good" (nearly noiseless) or "bad" (com- 
pletely noisy) . Messages can then be transmitted via the 
good channels, while the inputs to the bad channels are 
fixed or "frozen" to values known to the decoder. For 
n — > oo the fraction of good channels approaches the 
symmetric capacity of the original DMC, and thus the 
coding scheme achieves the symmetric capacity. 

Polar codes have attracted considerable interest in the 
classical information theory community. For instance see 
[3] for efficient constructions of polar codes, [4] for bounds 
on their error probabilities, [5, 6] for their use for source 
coding, and [7] for applications to the private communi- 
cation over the wire-tap channel; [6] also provides an ex- 
cellent overview. Recently, Wilde and Guha showed that 
channel polarization extends to quantum channels when 
transmitting either classical [8] or quantum [9] informa- 
tion, but did not give an efficient decoding algorithm. 

In this Letter we show how classical polar codes can 
be adapted to the task of efficiently transmitting quan- 
tum information over noisy channels. Our construction 
is specifically formulated for qubit channels, and the re- 
sulting codes are CSS codes [10, 11]. For Pauli channels 
and the erasure channel, we show that quantum infor- 
mation can be transmitted at a rate given by the sym- 
metric coherent information, the coherent information of 



the channel evaluated for Bell-state input, again using 
efficient encoding and decoding operations. Generically 
our construction requires the use of preshared entangle- 
ment between sender and receiver, though we demon- 
strate that in many cases the rate of preshared entangle- 
ment required is zero. 

Classical Polar Coding. — Polar coding is based on the 
following simple construction. Let W he & channel with 
binary input described by a random variable X and out- 
put described by an arbitrary random variable Y . Now 
consider two instances of W, denoted Wi and W2, whose 
inputs are connected by a CNOT gate, as shown in Fig. 1. 
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FIG. 1. The basic polar coding channel transformation. Two 
instances of a channel W are transformed into two logical 
channels, one with higher information-carrying capacity than 
the original and the other lower. The worse channel takes 
f/i as input and outputs Y1Y2, regarding U2 as random. The 
better channel takes U2 as input and outputs U\Y\Y2. 

For Ui, U2 uniformly and independently distributed on 
{0, 1}, it follows that 

2I{X : Y) = I{XiX2 : ^1^2) = /(C/iC/s : Y^Y^) 

= I{Ui : Y,Y2) + I{U2 : U1Y1Y2), (1) 

since then Xi and X2 are uncorrelated; in the second 
line we have used the chain rule for mutual informa- 
tion and the fact that Ui and U2 are independent. But 
I{U2 : U1Y1Y2) > I{X : Y), as U2 = X2. We may then 
think of the CNOT gate as transforming the two physical 
channels into two logical channels corresponding to the 
two terms in (1), whose input-output mutual informa- 
tions are higher and lower than that of the original chan- 
nel W, respectively. The "better" channel, denoted by 
W+, has input U2 and output UiYiY2, while the "worse" 
channel W- has input Ui and output Y1Y2. 

This process can be recursively applied to n = 2'^ in- 
stances of the channel W , resulting in a sequence of log- 
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ical channels corresponding to all possible sequences of 
better and worse combinations of the channels at the pre- 
vious stages. The original channels W are first divided 
into two sets and the channel transform applied to pairs 
of Ws, one from each set. This produces n/2 channels 
apiece of types W+ and W-. Applying this procedure 
again to the channels of each type separately results in 

n/4 channels of each of the four types W = 

W-+, , and W++, and so on. 
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FIG. 2. Recursive construction of the channel transformation 
for blocklength n = 4. The physical channels W are divided 
into two groups, the first "/2 and the last "•/2, and the basic 
transformation of Fig. 1 applied to pairs with one channel 
from each group. This results in "/2 channels each of W+ and 
W- ; these channels are likewise each divided into two groups 
and the basic transformation apphed again. 

By appropriately grouping the channels, as shown in 
Figure 2 for n = 4, we can ensure that the jth logical 
channel has Uj as its input and Yj := Ui ■ ■ ■ Uj-iYi ■ ■ ■ Yn 
as its output. One can easily work out that ^ logj n CNOT 
gates arc needed to implement the channel transform for 
blocklength n = 2^ . Its action is compactly described by 
the matrix Gk = G®'' , for G = (j^ J) over Fj. 

The quality of the jth logical channel can be assessed 
by the similarity of the two possible output distributions 
Yj \Uj =0 and Yj\Uj = 1 , as measured by the fidelity 



PrK- = y\U, = 0]PrK- = y\Uj = !]• (2) 



Finding the "good" logical channels which have an out- 
put fidelity below a predefined threshold can be done in 
0{n) steps [3]. For n oo, the logical channels po- 
larize, their outputs becoming either identical or com- 
pletely distinguishable, corresponding to useless or per- 
fect channels, respectively. Moreover, the fraction of es- 
sentially perfect channels tends to the mutual informa- 
tion I{X : Y), the symmetric channel capacity [1]. 

To transmit information the encoder merely needs to 
use the good channels and fix or "freeze" the inputs to 
bad channels, making the inputs known to the decoder 
in advance [12]. All inputs J7i • • • [/„ can then be de- 
coded sequentially using maximum likelihood decoding. 
To determine Uj, the decoder decides for the input to the 
jth logical channel with the highest likelihood, since that 
channel's outputs Ui ■ ■ ■ Uj-i and Yi • • • y„ are available. 
If the jth input is frozen, then no decoding is necessary. 
The ratio of likelihoods for the two inputs inherits a re- 
cursive structure from the channel transformation, and 



using this it is possible to compute all the needed ratios 
using only 0{nlogn) operations [1]. 

Quantum Channel Transformation. — The central in- 
sight of this work is that the same channel transforma- 
tion can be used to transmit quantum information. Let 
us regard the transformation as a unitary operator V by 
fixing an orthonormal basis of n qubits, the amplitude 
basis {\z)}^!z{o,i}", and setting V = ^^^^{o,!}" \Gkz){z\- 
In the complementary phase basis, whose elements are 
given by \x) = -^J2ze{o,i}"i-'^)'"' 1^) 



V acts as Gj: 



V 



x' ■GkZ-\-x-z 



^^£{0,1} 



(3) 



Here we have used G^T^ = Gk- We could have anticipated 
this property from the fact that in the phase basis the 
CNOT gates act with control and target interchanged, as 
described by G^. Since Gl = (G^)®^ the action of V 
in the phase basis is the same as in the amplitude basis, 
but with inputs and outputs arranged in reverse order. 

The dual behavior of V can be used to construct quan- 
tum polar codes from classical polar codes. First let W 
be a Pauli channel, which applies the operator trjfcr^ to 
the input with probability Pu,v, where u,v €: {0, 1} and 
<^x (o'z) is the Pauli x (z) operator. Suppose that to V 
and subsequently W®" we input halves of maximally- 
entangled qubit pairs, each pair in the Bell state |$) = 
^^g|g jz, z). Let B denote the input qubits and 
A the other halves of the pairs. Describing the channel 
as a unitary operation on B, also involving an auxiliary 
system E, this procedure results in the state 



I* 



ABE 



\GkZ 



\u,v} , 



(4) 



ti,-u,2G{0,l}" 



and p"^ 



where ct" denotes the operator cr"^ Cg) • • • (X) 
the probability distribution Pui,vi • • 'Pu„,v„- 

Now observe that an amplitude basis measurement of 
the n A systems with outcome z leaves system B in the 
amplitude basis state corresponding to GkZ + u, and that 
each outcome z occurs with equal probability ^ . This is 
precisely the output one obtains when polar coding for a 
binary symmetric channel (BSC) with bit flip probability 
Su = J2v=oPi,-"- *^all this channel the induced am- 

plitude channel Wa- It is easy to work out that finding 
the phase of ^ to be cc leaves B in the phase basis state 
corresponding to G^x + v, also with uniform probabil- 
ity. This again corresponds to a BSC, the induced phase 
channel Wp, with bit flip probability Sy = X^l^oP".!' 

The logical channels associated with the two induced 
channels both polarize, since each is essentially classical. 
Now suppose the jth input is good for both bases, which 
means that by using the logical channel outputs, the de- 
coder can recreate the results of measuring the Aj system 
in either the amplitude or phase basis (though not simul- 
taneously, of course) and, as we will in the next section. 
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this can be done efficiently. According to [13], the ability 
to determine both amplitude or phase implies that Aj 
is maximally-entangled with the channel outputs. More- 
over, the two classical decoding measurements used to 
recreate the amplitude or phase of Aj can be combined 
to create an operation which creates the Bell pair |$). 
Thus, to transmit quantum information, we simply need 
to make use of the inputs good for both amplitude and 
phase channels, and somehow freeze the remainder. 

Note that the outputs of the two logical channels are 
different; the output of the jth amplitude channel is the 
collection Zi...Zj^iB while the corresponding phase 
channel output is Xj^i . . .XnB, where Zi {Xi) denotes 
the outcome of an amplitude (phase) basis measurement 
on Ai from the state |^') in (4). Thus, the transformation 
V does not cause quantum channel polarization per se, 
as we are not dealing with a single channel. Rather, the 
two essentially classical channels polarize, and the fact 
that both amplitude and phase information are available 
to the decoder allows for quantum communication. 

Efficient Decoding. — Now let us define the encoding 
scheme more precisely and show how the classical po- 
lar decoders can decode quantum inputs. To achieve 
the symmetric coherent information, we cannot simply 
combine the classical polar schemes of Wa and Wp as 
heuristically described above. Doing so would ignore cor- 
relations between amplitude and phase errors, which are 
useful in the decoding process. Instead, we will make use 
of an extended version Wp' of the phase channel, which 
takes X to the pair (x + u) with probability Pu.v 

Note 

that this channel is also subject to classical channel po- 
larization. 

Quantum information is encoded into inputs corre- 
sponding to good logical channels for both the ampli- 
tude and extended phase channels Wa and Wp'. Call 
this set of inputs Q. The remaining inputs fall into three 
subets: those corresponding to logical channels bad for 
Wa (A), bad for Wp> (V), or bad for both {£). Inputs 
to A and V are frozen in the amplitude and phase bases, 
respectively. The inputs to £ must be entangled with 
the decoder to ensure proper decoding; in a certain sense 
this allows the decoder to freeze the input in both bases. 
Thus, the code resulting from this construction is gener- 
ically entanglement-assisted. 

The quantum decoder is constructed from the classical 
decoders of Wa and Wp'. In the language of quantum 
theory, these can be regarded as generalized measure- 
ments Ma and Aip', respectively, for each is an opera- 
tion on B (dependent on the frozen bits) having a clas- 
sical output: a guess of the input of the corresponding 
channel. The basic idea of the quantum decoder, shown 
in Figure 3, is to coherently run the two classical decoders 
in succession, determining and correcting the amplitude 
and phase error patterns u and v. 

To see that it works as intended, suppose the sender 
encodes halves of |$) into Q, amplitude basis states cor- 
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FIG. 3. The quantum decoding circuit. With the help of the 
two ancilla systems C and D, the decoding measurements Ma 
and M pi for Wa and Wpi are used to diagnose and correct 
the amplitude and phase error patterns u and v, respectively. 
The final step reverses the original encoding. 

responding to the classical bitstring g into A, and phase 
basis states corresponding to the bitstring h into V. The 
£ inputs are also halves of |$), but with the other half 
held by the receiver. The quantum state describing the 
systems after encoding and transmission can be expressed 
as l^i)-^^^ = NnfUl 1*)^^^, where is the projec- 
tor onto the string g in the amplitude basis of the systems 
A in the set A, and similarly for 11^ in the phase basis, 
while M is the normalization factor \J\A U 'P\. 

The first step in the quantum decoder is to use the 
classical Wa decoder to determine the amplitude error 
pattern u and correct it. This requires the amplitude- 
frozen input to A and of which the former, is known, 
and the latter, call it g' can be generated by measuring 
Ag in the amplitude basis. Together g and g' comprise 
the frozen bits Ja needed by the classical decoder to de- 
termine the amplitude input z. The quantum decoder 
performs the Ag measurement coherently, i.e. controlling 
the measurement operation on B as shown in Fig. 3, and 
stores the result in an ancillary system C . If the classical 
decoder has a low error probability, then the state [^'2) 
resulting from this process is essentially equal to 



-al\GkZ- 



where we have disregarded normalization for simplicity. 
Observe that the channel output B and entanglement 
assistance system Ag are essentially unchanged in this 
process; in the Appendix we give the precise details of the 
approximation. The error pattern u can be transferred 
to C by first applying the encoding circuit V adding the 
amplitude value of B to the result with a CNOT operation. 
Amplitude errors can then be corrected by another CNOT 
operation. This results in the state 

c I 



.x + v) \u) \u,v) 



where we have abused notation in writing Gj^x -f- v. 

Proceeding analogously, the phase error pattern v can 
be diagnosed and corrected by using the Wpi decoder on 
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systems BC. Working in the phase basis requires a few 
extra Hadamard gates and inverts the CNOT gates in the 
final two operations. After correcting the phase errors, 
the encoding operation can be reversed, leaving the state 

1*4) « E VP^.^f^l\^f\^f\uf\vf\u,vf, 

u,v,x 

which describes a maximally-entangled state between the 
Q systems in A and B. 

This protocol achieves a net rate given by i? = 
lim„_>.oo ^[log|Q| — log|f|]. By the properties of clas- 
sical polar coding, for any e > we can choose n large 
enough such that log |^ U £| < n[l — I(Wa) + e] and 
loglT'UfI < n[l-I{Wp') + e], where /(VFa) denotes the 
input-output mutual information of the channel Wa with 
uniform inputs, and similarly for I(Wpi). Since Q, A,V, 
and £ are disjoint, this yields R > I{Wa) + liWp') — 1. 
Direct calculation gives R > I — H{puv), which is pre- 
cisely —H{A\B) for the state |$) after subjecting B 
to the Pauli channel W. Here, H denotes the Shannon 
entropy of a classical distribution or von Neumann en- 
tropy of a quantum state. Thus, the protocol achieves 
the coherent information for W with input |(f>). 

Coding Without Entanglement Assistance. — Although 
entanglement assistance is used in the above construc- 
tion, nowhere is it shown to be necessary. We now give 
a condition under which the rate of entanglement assis- 
tance required is zero, namely, 

FAfi + < 1, (5) 

where Fa^ (^p',o) is the output fidelity of the amplitude 
(extended phase) channel. To show this result, we fol- 
low the original technique of [1, 14, 15] establishing the 
channel polarization phenomenon. 

Consider the stochastic process consisting of random 
variables Cj € {0, 1} for j ~ 0, . . . , n, corresponding to 
choices of better {Cj = 1) and worse {Cj = 0) channels 
in the recursive channel construction, with equal prob- 
ability for each. The entire sequence Co , . . . , C„ corre- 
sponds to an input to the polar coding circuit. Closely 
related is the process describing the output fidelity Fj 
of the channel corresponding to the sequence Cq, . . . ,Cj. 
The idea behind the polarization proofs in [1, 15] is to 
show that in the limit n — > 00, converges to a random 
variable having support solely on {0, 1}, meaning the in- 
put to a particular channel is either transmitted perfectly 
{Fn — 0) or completely garbled (F„ — >• 1). 

One method of examining the convergence of Fn is to 
bound it by another process whose convergence proper- 
ties are easier to determine. To this end, Arikan and 
Telatar considered the process Fj [14, 15], defined by 

^^+1 = { S;' - Ff = 1 ' 



with Fq = Fq, for which it can be shown that Fj < Fj for 
all j. The Fj process has the property that for each se- 
quence Cj there exists a threshold initial value F^^ below 
which lim„_j.oo Fn = and above which lim„_j.oo F,' = 1 
(see Observation 4 of [14]). Additionally, observe that 
the new process is invariant under the map taking Fj to 
1-Fj and to l~Cj. 

In the quantum case we are interested in the fidelity 
processes of the amplitude and phase channels, denoted 
by Faj and Fpi j, respectively. The fact that the phase 
encoder is the reverse of the amplitude encoder implies 
that Fpi j makes the opposite channel choice as F^ „ at 
each step, i.e. Cp'j = 1 — Ca.j- Considering the associ- 
ated processes F^ ^ and Fp, ^ and their symmetries as 
described above, we therefore find that the sum process 
Fa,7i + F'pi^n oiily converges to 2 when F^ q + Fp, q > 
Fj'h + I - F/ij = 1. But because F^ ^ = Fa,o and 
F'p, ^ = Fp,fl and Fj > F,-, it follows that Fa.u + Fp-,„ 
can only converge to 2 when Fa^ + Fp' ^ > 1 (though it 
might still converge to 1 or 0). A value of 2 for the sum 
process indicates that the input is useless for transmitting 
both amplitude and phase information, and therefore we 
conclude that Fa,o + Fp'^ < 1 impfies f = 0. 

We can easily reformulate this threshold result in terms 
of noise rates of two Pauli channels of interest: inde- 
pendent amplitude and phase errors, and the depolar- 
izing channel. In the former case Wp is as good as 
Wp' since the error patterns are independent; both Wa 
and Wp are binary symmetric channels for which the 
fidelity is given by 2 y^S{l — S) for S the bit flip probabil- 
ity. Thus, the above condition becomes 2y^Su{l — Su) + 
2^ySv{l — Sv) < 1. In the case of equal error rates, we 
find a threshold of (2 - v^)/4 « 6.70%. For compar- 
ison, the coherent information of that channel goes to 
zero at 11.00%. For the depolarizing channel with pa- 
rameter q, a full calculation using Wp' leads to the con- 
dition 2y^f (1- f ) + f +2^(1 -q)§ < 1. This yields 

a threshold of approximately 12.05%, compared with the 
coherent information threshold of approximately 18.93%. 

Conclusions. — We have adapted the results for clas- 
sical polar codes to show that there likewise exist ef- 
ficiently cncodable and decodable qubit codes, which 
when entanglement-assisted, achieve a communication 
rate equal to the coherent information for Pauli chan- 
nels. Our construction also applies to the quantum era- 
sure channel with erasure probability p, as the outputs of 
the associated classical channels Wa and Wp are again 
classical (simultaneously diagonalizable) . In fact, as Wa 
and Wp are also erasure channels, the quantum polar 
coding scheme achieves the capacity of the erasure chan- 
nel, namely 1 — 2p [16]. It is also easy to see from the 
condition presented in the previous section that, in this 
case, the rate of entanglement assistance required is zero. 

An immediate practical application of such codes 
which is feasible using current technology is to quantum 
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key distribution (QKD). Due to the CSS nature of the 
codes, the well-known relationship between CSS coding 
and secret key generation [17] implies that our proto- 
col can be converted into a means for efficient, high-rate 
secret key distillation, possibly assisted by a preshared 
classical key. Such a key distillation scheme would be 
suitable for use in prepare-and-measure QKD protocols, 
as the polar code-based key distillation step itself would 
be entirely classical and not require actually implement- 
ing the full quantum code using a quantum computer. 
Quantum polar codes may also prove useful in the study 
of fault-tolerant quantum computation as an alternative 
to concatenation-based approaches. 

Our results merely initiate the study of quantum polar 
codes, and many unanswered questions remain. Most 
immediate is the issue of entanglement assistance. We 
have been able to rigorously show that under low-noise 
conditions, the rate of entanglement assistance required 
is zero, but one would like to know that this is always the 
case, a conjecture supported by preliminary numerical 
evidence. 

Together with Wilde, one of us has shown how to com- 
bine the method here with [8] to construct a polar coding 
scheme for arbitrary qubit channels and show that the 
rate at which entanglement assistance is required goes 
to zero for degradable channels [18]. One would like to 
extend the method to general qudit channels, as well as 
investigate how the normal, not necessarily symmetric, 
coherent information can be achieved. 
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APPENDIX 

This appendix demonstrates that the quantum polar decoder for channel W outputs high-fidelity entanglement 
when the classical polar decoders of the associated classical channels Wa and Wp' have low error probability. 

In the classical polar coding scheme for the amplitude channel Wa, the frozen bits / and message bits m are sent 
through the encoder and channel to the receiver. The frozen bits are input to the set AU £ while the message bits 
are input to QUV. We denote by z the input to the polar coding circuit; to emphasize the dependence of this string 
on m and /, we write z(m, /). In the notation of quantum information theory, the output of the channel is the mixed 
state 

S^J = J2Pn\Gkz{m, f) + u){Gkz{m, f) + u\^ . (7) 

u 

The receiver attempts to recover m from the channel output g^.f using the polar decoding algorithm and the frozen 
bits /. As discussed in the main text, this process can be viewed as a measurement A4a oi Qm j- This measurement 
consists of elements A^.^ which determine the probability that the decoder guesses that the entire input was z via 
the expression Pr(z|TO, /) = Tr[p^.jA^^]. This is equivalent to the probability of guessing the input message was m 
since the frozen bits are known to the decoder with certainty. Thus, the probability of incorrect decoding averaged 
over messages m and frozen bits / is given by 

P,,,{Ma) = 1-^ Tr[^,^^/A^,(„_^)]. (8) 

me{0,l}i°8lCLJP| J 

The situation for the extended phase channel Wpi can be expressed similarly. Here the message bits m are input 
to the set QlJ A while the frozen bits / are input to 7^ U £, and we call the entire input to the polar coding circuit x. 
Assuming the channel acts on its input in the phase basis (which will be convenient later), the output state can be 
written 

® \u){uf. (9) 
The measurement Jv[ pi has elements F^^' such that the average error probability is 

Pe..(-MpO = 1 - E n^S^r^imJ)]- (10) 

mG{0,l}'°8ieuA| J 

Now consider the quantum state l^*!)"^^^ from the main text, describing the input and output systems in the 
quantum polar coding scheme, with amplitude input g 'm A and h in V . It takes the form 

= E V^n^nr \z)^ (-i)-(^-+«) \Guz + uf |u, vf^ (11) 

«,)j,2e{o,i}" 

where we have explicitly written out the action of cr". The first step of the decoder is to coherently implement the 
M.A measurement. This is accomplished by coherently measuring the £ subsystem of A to determine g' , and thus 
the entire string of frozen bits /, subsequently using / to coherently implement A^^, and storing the result z in an 
ancillary system C. Formally, the state resulting from this transformation can be expressed as 

1*2)^"^" = E v^nf,<nr \z)^ (-1)-^'^-+") \G,z + uf \zt' \u, vf. 

•u,ii,z,z'G{0,l}",g'e{0,l}'°s 1^ 

(12) 

Ideally, the output would be the state 

1*;.)^"^" = E v^nXl^)^-i)"-^^^^+"MG.. + u)^|z)^K.)^, (13) 



BC 



E^ 



Glx{m, f) + V ){ Glx{m, /) + ^ 
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i.e. the value of z in A would simply be copied to C without any backaction on systems B and Ag at all. Computing 
the fidelity of the two states and averaging over uniformly-random choices of 5, we find 

^ E (*2l*2> = ^ E PlAA^,''^f^l\^){GkZ + u\^,\GkZ + u) (14) 

gG{0,l}i°s l-^l g.g' ,-u.,v,z 

= P E PlA^\'^l\^^f'^'^ {Guz{mJ) + u\^Kj^)\Guz{rnJ) + u) (15) 

■u,v,m,/ 

= ^ E Trfftn J^S,z{mJ)\ (16) 



l-pcrr(AlA). (18) 



In the second equality we relabel the sum on z as a sum on /' in A U £ and a sum on m in Q U P; the projections 
on g and g' ensure /' = / in the former summation. In the third equality we use the fact that the outcomes of a 
conjugate basis measurement ijlh) have uniform probability for an amplitude-basis state {\m)). Then we arc able to 
marginalize Pu.v over v and obtain the state Qm-j- Finally, the inequality arises because VA > A for any operator 
< A < 1. 

Since the average of the fidelities for different choices of g exceeds 1 — Pcri (A^A), there certainly exists one value 
of g for which this is true, and we choose this one for the coding scheme. In fact, by Markov's inequality applied 
to 1 — (\I'2|^'2), a fraction at most ^J Pcvi{M. a) choices have fidelity lower than 1 — \J PcrriJ^ a) ■ Converting the 
fidelity bound into trace distance [? ], we find that the actual and ideal outputs have trace distance no greater than 
•\/2porr(A^yi)- Thus, wc may proceed with the action of the decoder using the ideal output. 

The remainder of the amplitude recovery step produces the state 



ti,-u,zG{0,l}" 



E V^nXl5?)^|GiW«) {-ir''\uf\u,vf . (20) 



Measuring this state coherently with M p' in the same manner as before produces 



ti,'(;,a:;,a;'G{0,l}",/i' 

As before, the ideal output would see a copy of x from A in system _D, with no backaction on A^^ or C: 



\^'^f^CDE ^ ^\A^ E V^nXl^)^|GlW-> {-l)-\uf\^fM\ (22) 

By an entirely similar calculation as in the amplitude case, we find that the error probability of p/ bounds the 
averaged fidelity of the actual and ideal outputs: 

^ E (*4|*^)>l-Pcn.(>fp')- (23) 

fte{o,i}'°Ei^ 

Thus we may proceed as before, choosing the optimal value of h for the coding scheme and continuing the decoder 
analysis under the assumption that the output is ideal, and deal with the accumulated errors later. The remainder of 
the phase recovery and correction operation produces 



1*5)^"^"" = E v^nXl-)^|G^)"(-i)"-KO'"l^)"|u,«)^ (24) 

lij-UjX^ {0,1}" 
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Finally, a further application of the encoding circuit to B produces maximally entangled qubit pairs in the Q and £ 
subsystems of A and B. The latter systems are local to Bob, but the former systems represent shared entanglement 
between Alice and Bob. 

By using the triangle-inequality property of the trace distance, the actual state of Aq and Bq produced by the 
decoder has distance less than y^2pf,„{MA) + \/2pcrr{-Mp') to the ideal, maximally entangled output. Thus, the 
quantum decoder functions well whenever the classical decoders for Wa and Wp' do, too. 



